$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: x0JOlGEzCjA5ToNZvUjJl6ikbShTWAB2PUWZ1S8l3Ws= Subject key identifier: 67:1B:AD:C0:D1:50:BF:E0:A7:72:8A:E1:EC:DE:6D:B5:48:56:40:31 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 370C2D613BC755AEC71976153EDF33AB26DAB284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: 0102 Signing time: Sat 28 Feb 2026 09:11:36 +0000 Manifest this update: Sat 28 Feb 2026 09:06:36 +0000 Manifest next update: Tue 03 Mar 2026 10:04:36 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: jD2cO8KrbWOKVleaTGpVX/8TMw5W7GOAQ67Np7SCy8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0c:2d:61:3b:c7:55:ae:c7:19:76:15:3e:df:33:ab:26:da:b2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Feb 28 09:06:36 2026 GMT Not After : Mar 3 10:04:36 2026 GMT Subject: CN=671BADC0D150BFE0A7728AE1ECDE6DB548564031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:02:73:db:93:c6:e1:f8:39:19:27:29:42:f8: 21:45:0d:5e:80:1e:56:77:d5:b5:51:23:d5:c5:28: 74:3f:15:30:8a:f1:b4:b5:53:da:82:87:3d:2e:5e: bc:83:b6:2b:ae:7e:c1:c4:a4:05:8e:6b:a5:df:6e: ea:bd:a4:ef:f8:fd:50:de:37:e4:14:b6:ee:d9:54: df:3f:3b:ea:1b:4e:55:37:a7:71:cb:28:67:e8:66: 87:8c:34:e9:06:f6:f4:f8:c0:33:67:c8:a9:5a:70: 0b:63:b7:13:73:d7:70:c5:74:5e:1c:9d:7c:01:ad: 37:73:53:28:33:ca:cd:b1:3f:90:9f:15:4b:2d:dc: 53:91:7d:9f:e1:b9:f5:4e:79:20:12:9e:2f:9e:ff: a5:d7:17:d7:42:68:c2:8a:ed:17:cd:3d:3d:49:2f: ae:19:db:2e:f8:f9:75:6a:6d:ee:e4:60:81:42:34: 2e:27:dc:51:de:b3:83:92:6a:71:7a:81:21:96:2e: 15:e3:bd:ce:53:a5:db:4b:e6:09:cb:0c:a1:ee:d4: d0:b2:b0:39:76:ea:16:60:cc:06:d1:25:68:7e:ea: a3:17:83:19:94:71:dc:e4:04:d2:28:ab:21:09:c1: 0b:b8:99:bf:7f:75:3e:46:f7:f0:84:df:c6:33:7c: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1B:AD:C0:D1:50:BF:E0:A7:72:8A:E1:EC:DE:6D:B5:48:56:40:31 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a6:8b:be:77:00:35:02:1b:f7:4c:93:f2:ca:c5:e8:fe:f5: 46:49:6f:cc:57:2e:77:5a:10:94:b0:6f:5c:33:8b:f3:8b:15: 80:2d:39:04:aa:32:ad:5d:70:56:1c:64:dc:1f:47:6f:c7:54: 7a:e1:d0:fd:c7:0e:98:fc:8f:f2:ed:47:14:42:80:04:c2:59: 47:88:60:9e:99:65:d9:0b:7f:f2:78:f2:6a:b2:9b:9e:8d:87: b7:a8:76:a1:56:50:ae:d2:28:f2:ce:33:7d:25:4f:e6:1f:8c: c5:17:95:54:e9:65:ea:1c:7b:0e:b5:62:2c:51:03:e1:f1:3d: 09:58:11:9c:c4:e0:b9:86:4c:32:32:71:2d:51:40:2b:8e:1c: 38:12:97:0c:a4:65:4f:34:47:dd:50:e6:ab:d3:39:e5:2d:60: 55:1c:f5:2b:82:8b:e1:8b:6f:0f:49:d6:a8:c8:20:60:1d:31: 61:b3:01:3d:1a:18:10:e6:cc:50:10:b2:fc:95:bc:10:70:45: cb:0a:f0:1e:0d:15:98:28:54:b0:92:4a:92:3c:4d:74:ee:e0: 24:38:02:a4:21:36:91:07:c0:b4:c5:c6:1b:09:72:55:72:6b: 0c:54:f0:40:8b:e4:58:27:2d:50:8b:1d:4b:97:66:f0:ae:02: 22:0e:ec:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwwtYTvHVa7HGXYVPt8zqybasoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNjAyMjgwOTA2MzZaFw0yNjAzMDMxMDA0MzZaMDMxMTAvBgNV BAMTKDY3MUJBREMwRDE1MEJGRTBBNzcyOEFFMUVDREU2REI1NDg1NjQwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnAnPbk8bh+DkZJylC+CFFDV6A HlZ31bVRI9XFKHQ/FTCK8bS1U9qChz0uXryDtiuufsHEpAWOa6Xfbuq9pO/4/VDe N+QUtu7ZVN8/O+obTlU3p3HLKGfoZoeMNOkG9vT4wDNnyKlacAtjtxNz13DFdF4c nXwBrTdzUygzys2xP5CfFUst3FORfZ/hufVOeSASni+e/6XXF9dCaMKK7RfNPT1J L64Z2y74+XVqbe7kYIFCNC4n3FHes4OSanF6gSGWLhXjvc5TpdtL5gnLDKHu1NCy sDl26hZgzAbRJWh+6qMXgxmUcdzkBNIoqyEJwQu4mb9/dT5G9/CE38YzfPJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxutwNFQv+Cncorh7N5ttUhWQDEwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKmi753ADUCG/dMk/LKxej+9UZJb8xXLnda EJSwb1wzi/OLFYAtOQSqMq1dcFYcZNwfR2/HVHrh0P3HDpj8j/LtRxRCgATCWUeI YJ6ZZdkLf/J48mqym56Nh7eodqFWUK7SKPLOM30lT+YfjMUXlVTpZeocew61YixR A+HxPQlYEZzE4LmGTDIycS1RQCuOHDgSlwykZU80R91Q5qvTOeUtYFUc9SuCi+GL bw9J1qjIIGAdMWGzAT0aGBDmzFAQsvyVvBBwRcsK8B4NFZgoVLCSSpI8TXTu4CQ4 AqQhNpEHwLTFxhsJclVyawxU8ECL5FgnLVCLHUuXZvCuAiIO7II= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:26 2026 by rpki-client